The vulnerability of Google Chrome’s browser allows a hacker to replace the URL.

The vulnerability of the ios/web/webstate/ui/crwwebcontroller.mm component in the Google Chrome browser does not guarantee that an invalid URL will be replaced with a about:blank page. Exploiting this vulnerability could allow a malicious actor to substitute a URL with a specially crafted website...

Google Chrome memory misreference vulnerability (CNVD-2016-07205)

Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in event binding in Google Chrome versions prior to 53.0.2785.89. An attacker can exploit this vulnerability to execute arbitrary code in the browser context to bypass securi...

Google Chrome PDFium heap buffer overflow vulnerability (CNVD-2016-07196)

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A heap buffer overflow vulnerability exists in PDFium in versions of Google Chrome prior to 53.0.2785.89. An attacker could exploit this vulnerability to execut...

Google Chrome PDFium heap buffer overflow vulnerability (CNVD-2016-07206)

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A heap buffer overflow vulnerability exists in PDFium in versions of Google Chrome prior to 53.0.2785.89. An attacker could exploit this vulnerability to execut...

UBUNTU-CVE-2016-5167

Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

UBUNTU-CVE-2016-5156

extensions/renderer/eventbindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts to process filtered events after failure to add an event matcher, which allows remote attackers to cause a denial of service use-after-free...

UBUNTU-CVE-2016-5147

Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS UXSS."...

New HTTPS URL Leakage Attack Leaves PCs, Macs, Linux Systems Vulnerable

LAS VEGAS — Researchers have found flaws in the Web Proxy AutoDiscovery protocol tied to DHCP and DNS servers that allow hackers spy on HTTPS-protected URLs and launch a myriad of different malicious attacks against Linux, Windows or Mac computers. According to the security firm SafeBreach, this...

Google Chrome memory misreference vulnerability (CNVD-2016-05593)

Google Chrome is a web browsing tool developed by Google. A memory misreference vulnerability exists in the handling of source information in proxy authentication in versions prior to Google Chrome 52.0.2743.82. A man-in-the-middle attacker modifying the client-to-server data flow can spoof the...

Google Chrome SOP Protection Mechanism Bypass Vulnerability

Google Chrome is a web browsing tool developed by Google. A protection mechanism bypass vulnerability exists in Service Workers in versions prior to Google Chrome 52.0.2743.82. A remote attacker can exploit this vulnerability to bypass the same-origin policy...

Google Chrome URL Forgery Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A URL forgery vulnerability exists in the file ios/web/webstate/ui/crwwebcontroller.mm in versions of Google Chrome prior to 52.0.2743.82 on the iOS platform, which stems from a failure to verify that invalid URLs are...

CVE-2016-5134

net/proxy/proxyservice.cc in the Proxy Auto-Config PAC feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by operating a server with a PAC script, a related issue to...

CVE-2016-5130

content/renderer/historycontroller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site...

UBUNTU-CVE-2016-5128

objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

UBUNTU-CVE-2016-1706

The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to...

UBUNTU-CVE-2016-5130

content/renderer/historycontroller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site...

The vulnerability of Google Chrome browser allows a violator to circumvent access restrictions.

The vulnerability of the DecodeHSTSPreloadRaw function in the net/http/transportsecuritystate.cc file of Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to circumvent access restrictions by manipulating the URL strings...

The vulnerability of Google Chrome browser allows a violator to circumvent access restrictions.

The vulnerability of the Google Chrome browser’s blink component is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass access restrictions by using a Java script that utilizes the blink API in its operation...

The vulnerability of Google Chrome browser allows a violator to circumvent access restrictions.

The vulnerability of the bindings/scripts/v8types.py file in Google Chrome’s Blink subsystem is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass access restrictions by using a Java script that utilizes the Blink API...

The vulnerability of Google Chrome browser allows a violator to circumvent access restrictions.

The vulnerability of the content/browser/webui/contentwebuicontrollerfactory.cc file of Google Chrome is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent access restrictions due to errors in processing requests to the...